General
- Target AnVir.exe
- Size 11.2MB
- Sample260823-jnvmtavbld
- SHA256 e0cbf935b59a329b25581611ff509cbae7d023acc4e312f26d0cde43b3f1db40
- MD5 4f43c88d7f927530e5e07d4d20e60071
- SHA1 d229e9abd1eae3a8b17b93182282f4b463103f79
- SHA512 77d9600637c43c75615073be404f4d497f3c0be45d97bcd154f01eb3924feb6301a4f07755822012e0f3c9df2edb9deb3b53ef78b102c97c3a8a526d7b3ab7ab
- SSDEEP 98304:XE3aQfCwDm55vZ2mpWqAKziinEvYzH6r0Vq5sikGgaDY2ipmU9:0qUCwQ5h2mRAKziXYzH6K
- TLSH T14AC69D6A9F444127D67712F025070B92672BFD6862BA551300D8B00E7DF66BE4F3E2EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
AnVir.exe
Resource
win10v2004-20260513-en
9 signatures
300 seconds
Behavioral task
behavioral2
Sample
AnVir.exe
Resource
win11ltsc2024-20260709-en
5 signatures
300 seconds
Malware Config
Targets
-
- Target AnVir.exe
- Size 11.2MB
- SHA256 e0cbf935b59a329b25581611ff509cbae7d023acc4e312f26d0cde43b3f1db40
- MD5 4f43c88d7f927530e5e07d4d20e60071
- SHA1 d229e9abd1eae3a8b17b93182282f4b463103f79
- SHA512 77d9600637c43c75615073be404f4d497f3c0be45d97bcd154f01eb3924feb6301a4f07755822012e0f3c9df2edb9deb3b53ef78b102c97c3a8a526d7b3ab7ab
- SSDEEP 98304:XE3aQfCwDm55vZ2mpWqAKziinEvYzH6r0Vq5sikGgaDY2ipmU9:0qUCwQ5h2mRAKziXYzH6K
- TLSH T14AC69D6A9F444127D67712F025070B92672BFD6862BA551300D8B00E7DF66BE4F3E2EB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Pre-OS Boot
1Bootkit
1Subvert Trust Controls
1Install Root Certificate
1